Manager - IT Governance/Risk & Compliance

Description:

Job Description :

We are seeking an experienced IT Governance, Risk, and Compliance (GRC) Manager to develop, implement, and maintain governance frameworks and risk management strategies within our IT operations.

This role will play a critical part in ensuring regulatory compliance, vendor management, and change control for IT functions, with a strong focus on audit readiness and risk mitigation.

The ideal candidate will have a strategic mindset and hands-on experience in managing cross-functional initiatives.

Responsibilities:

- Develop and implement IT governance frameworks, policies, and ensure compliance with organizational objectives and regulatory standards.

- Identify, assess, and mitigate IT risks; maintain the IT risk register and perform regular risk assessments.

- Manage internal and external IT audits, ensure timely remediation of findings, and maintain audit documentation.

- Oversee IT outsourcing compliance by monitoring vendor performance, contract adherence, and regulatory obligations.

- Lead and deliver GRC-related projects end-to-end, ensuring timely execution and stakeholder alignment.

- Implement change management processes and monitor adoption across IT and business teams.

- Support and document IT incident response procedures, ensuring swift resolution and preventive measures.

Requirements:

- Strong knowledge of IT governance frameworks (e.g., COBIT, ISO) and risk management methodologies.

- Experience with IT outsourcing, vendor management, and related compliance standards.

- Excellent problem-solving and analytical capabilities to evaluate complex risk scenarios.

- Effective communication and stakeholder engagement skills across business units.

- Proficiency in GRC software tools and platforms.

- Exceptional organizational skills and attention to detail.

- Bachelor's degree in Information Technology, Computer Science, or related field.

- Relevant certifications such as CISA, CISSP, ITIL, PMP are a plus.

- 8-10 years of experience in IT governance, risk management, and compliance roles